The Saudi Arabia SFDA medical device framework is run by the Saudi Food and Drug Authority under the Medical Devices Interim Regulation. Devices are classified using GHTF/IMDRF-aligned risk categories, foreign manufacturers must appoint a Saudi Authorized Representative, and products are listed in the Medical Device National Registry (MDNR). Gulf Cooperation Council harmonization is partial, so SFDA remains the primary gateway for the Kingdom itself.

By Tibor Zechmeister and Felix Lenhard.

TL;DR

  • The Saudi Food and Drug Authority (SFDA) regulates medical devices under the Medical Devices Interim Regulation and associated SFDA guidelines .
  • Classification follows GHTF/IMDRF principles — typically four classes (I, IIa, IIb, III) aligned with EU MDR categories.
  • Foreign manufacturers must appoint a Saudi Authorized Representative (AR), a local entity that holds the SFDA licence and handles vigilance.
  • The Medical Device National Registry (MDNR) is the central database for authorized devices and establishments.
  • Arabic-language labeling elements are required; technical documentation is typically accepted in English .
  • Gulf Cooperation Council (GCC) cooperation exists but is partial — SFDA approval does not automatically grant access to the UAE, Kuwait, Qatar, Bahrain, or Oman.
  • Typical timelines: 4–9 months for lower risk, 9–15 months for higher risk.

Why this matters

Saudi Arabia is the largest medical device market in the Gulf and among the largest in the Middle East. For EU startups with a CE mark, SFDA is often the most accessible Middle East entry point — in part because SFDA's classification framework aligns closely with MDR, and in part because the regulator publishes guidelines in English.

But "accessible" does not mean "automatic." SFDA is a modern, active regulator. It runs inspections, it enforces vigilance, it rejects poorly prepared dossiers, and it has been tightening requirements around local post-market obligations. Treating Saudi Arabia as a rubber-stamp extension of your CE certificate is a mistake.

Tibor's observation from supporting startups into the Kingdom: the technical documentation barrier is usually modest. The commercial and operational barriers — AR selection, local distribution, post-market vigilance operations, Arabic labeling — are where projects stall. Felix's Subtract to Ship point: if you cannot name the Saudi hospital or tender that will buy your first unit, do not open an SFDA file.

What the SFDA framework actually says

Primary legislation and authority. The Saudi Food and Drug Authority is established by Royal Decree. Medical devices are regulated under the Medical Devices Interim Regulation and its implementing rules, which have been progressively refined through SFDA guidance documents .

Classification. SFDA uses a risk-based classification aligned with GHTF/IMDRF principles, broadly mirroring the EU MDR classes (I, IIa, IIb, III). In most cases, your EU MDR classification carries over directly — a welcome simplification versus markets like Korea or India. The rules, however, are SFDA's own, so formal classification is done against the SFDA framework, not assumed from the MDR class.

Authorized Representative (AR). Foreign manufacturers cannot hold SFDA licences directly. You must appoint a Saudi-resident Authorized Representative. The AR:

  • Is the legal point of contact with SFDA.
  • Holds the establishment licence and the medical device marketing authorization.
  • Is responsible for local vigilance reporting and post-market surveillance duties.
  • Must itself be licensed by SFDA as a medical device establishment.

This is similar in concept to the EU Authorized Representative role under MDR Article 11, but the Saudi AR additionally functions as an importer or establishment holder in most setups.

Medical Device National Registry (MDNR). The MDNR is the SFDA's central database of authorized medical devices and licensed establishments. Listing in MDNR is effectively the visible proof of market authorization in the Kingdom. Both devices and establishments (manufacturer, AR, importer, distributor) are registered.

Documentation. SFDA expects a technical dossier aligned with the GHTF Summary Technical Documentation (STED) format or equivalent. In practice, a well-prepared MDR technical file (Annex II) with some restructuring is acceptable. Reference approvals — particularly CE and FDA — are weighted heavily, which gives CE-marked startups a meaningful advantage.

Language. Technical documentation is typically accepted in English. Labeling, instructions for use, and some patient-facing materials must include Arabic elements; the exact scope depends on the device category and intended user .

Gulf cooperation. The GCC — Saudi Arabia, UAE, Kuwait, Qatar, Bahrain, Oman — has made progress toward harmonization of medical device regulation, but each country still runs its own authority and registration process. SFDA approval does not automatically translate to a UAE MOHAP, Kuwait, or Qatar approval. Build your Gulf strategy country-by-country.

A worked example

A Munich-based startup has CE marking for a Class IIb orthopaedic implant. A large Saudi hospital group has expressed interest following a conference in Riyadh.

  • Classification. Under SFDA rules, the device maps cleanly to Class IIb, matching the MDR class.
  • AR selection. They spend two months evaluating four AR candidates. They choose a mid-sized Saudi medical device company with an existing SFDA establishment licence in the orthopaedic category, rather than a general distributor. Contract includes a clean licence-transfer clause and monthly reporting obligations.
  • Dossier preparation. Their MDR technical documentation is restructured into SFDA's expected format. Free sale certificate obtained from their Notified Body country. ISO 13485 certificate, CE certificate, and clinical evaluation summary included.
  • Labeling. Outer carton and instructions for use prepared with Arabic translation of key safety, identification, and use information. Sterile packaging labels similarly adapted.
  • Submission and review. Submitted via SFDA's online portal. First response in roughly 3 months with 7 queries. Response within 4 weeks. MDNR listing issued around 9 months after initial submission.
  • Budget. Roughly EUR 40,000–70,000 including AR setup, SFDA fees, Arabic translation, local labeling compliance review, and regulatory consultant support. Ongoing AR retainer depends on service scope.

Reasonable. Predictable. Not a sales pitch — just a working blueprint.

The Subtract to Ship playbook

  1. Have a Saudi customer before you have a Saudi file. SFDA is not speculative work. If you do not have a named hospital, distributor, or tender, park the project.
  2. Select the AR for domain fit, not just cost. A cheap AR with no experience in your device category will cost you six months of queries. A slightly more expensive AR with the right establishment category and SFDA relationships pays for itself on the first review cycle.
  3. Do not rebuild your technical file — reformat it. Your MDR Annex II documentation is 80 percent of the SFDA dossier. Restructure it to SFDA's expected format rather than starting fresh. Reuse your Clinical Evaluation Report and risk management file with a clear cross-reference table.
  4. Treat CE as leverage. SFDA gives meaningful weight to reference jurisdiction approvals. Your CE certificate, Notified Body ID, and ISO 13485 certification are not decoration — they are part of your review strategy. Highlight them prominently in the dossier cover letter.
  5. Get the Arabic labeling right the first time. Use a translator with medical device experience. Have the labeling reviewed by an Arabic-speaking clinician or regulatory professional before submission. Translation deficiencies are a common and avoidable delay driver.
  6. Plan for post-market operations from day one. Vigilance reporting, complaint handling, and field safety corrective actions must work on day one of market presence. Your AR's operational capacity here matters more than the AR's sales pitch.
  7. Do not assume GCC-wide access. If your plan mentions the "Gulf" as a single market, rewrite the plan. SFDA is Saudi Arabia only. Treat the UAE and others as separate projects with their own budgets and timelines.

Reality Check

  1. Do you have a named, committed Saudi customer or tender — not just an expression of interest?
  2. Is your AR a licensed SFDA medical device establishment in your specific device category, not just a general distributor?
  3. Is your AR contract written with clear licence-transfer rights, KPIs, and exit clauses?
  4. Is your technical dossier formatted for SFDA, with a cover letter that explicitly surfaces your CE and ISO 13485 status?
  5. Is your Arabic labeling reviewed by a qualified reviewer — not machine-translated?
  6. Does your QMS cover Saudi vigilance obligations, including timelines and AR responsibilities?
  7. Is your Saudi launch budget realistic and ring-fenced, or is it coming out of general working capital?
  8. If you add Saudi Arabia, what are you subtracting from your roadmap to make room for it?

If you cannot answer honestly yes to most of these, subtract Saudi Arabia for now. It is not going anywhere. The market will still be there in twelve months.

Frequently Asked Questions

Does SFDA accept CE certificates? SFDA weighs CE certification heavily as supporting evidence from a reference jurisdiction, but it is not automatic market access. You still file an SFDA dossier, undergo review, and receive an SFDA authorization listed in the MDNR.

Can my EU Authorized Representative act as my Saudi AR? No. The Saudi Authorized Representative must be a Saudi-resident, SFDA-licensed medical device establishment. The EU AR under MDR Article 11 has no Saudi role.

Is the SFDA approval valid across the GCC? No. Gulf Cooperation Council harmonization is partial. SFDA authorization applies to Saudi Arabia only. The UAE, Kuwait, Qatar, Bahrain, and Oman each require their own registration processes.

How long does SFDA review take? For lower-risk devices with complete dossiers and CE certification, typically 4–9 months. For higher-risk devices or dossiers with significant queries, 9–15 months. Quality of preparation is the largest single driver of timeline.

Do I need Saudi clinical trials? Usually not. For CE-certified devices, SFDA typically accepts the clinical evaluation and clinical data supporting the CE mark, supplemented by your post-market clinical follow-up plan. Novel devices without reference approvals may face additional scrutiny.

What must be translated into Arabic? Labeling elements, instructions for use, and patient-facing information must include Arabic. Technical documentation (design, verification and validation, risk management) is typically accepted in English. Confirm the exact scope for your device category before translation .

Sources

  1. Kingdom of Saudi Arabia, Saudi Food and Drug Authority, Medical Devices Interim Regulation and implementing guidelines .
  2. SFDA, Medical Device National Registry (MDNR) operational documentation.
  3. Regulation (EU) 2017/745, Article 11 (for EU AR comparison only).
  4. EN ISO 13485:2016+A11:2021 — QMS, referenced by SFDA as accepted quality system evidence alongside SFDA requirements.